Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0139BEFAF3B811EFB70B3092762E951A.roa
File: 0139BEFAF3B811EFB70B3092762E951A.roa (raw, json)
Hash identifier: OFbX0IOcUHhdwXULypg9uVZxf7DXYJjeXRy/MVtInRE=
Subject key identifier: 03:F6:57:D2:8B:25:54:48:61:46:38:8E:E3:03:6C:BB:FB:B1:68:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0139BEFAF3B811EFB70B3092762E951A.roa
Signing time: Tue 25 Feb 2025 20:35:09 +0000
ROA not before: Tue 25 Feb 2025 20:35:05 +0000
ROA not after: Wed 09 Apr 2025 20:35:05 +0000
asID: 138915
IP address blocks: 154.95.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90089 (0x15fe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:35:05 2025 GMT
Not After : Apr 9 20:35:05 2025 GMT
Subject: CN=67be297d-c780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:d7:68:45:4e:1f:95:9c:f6:df:d3:c9:27:
34:a6:e1:5a:30:5b:08:d7:11:db:cc:83:10:09:31:
76:fa:2c:4e:93:bc:f6:eb:26:53:51:9c:da:05:16:
2c:44:a7:74:44:18:93:6b:d9:f5:93:a8:36:27:d4:
02:14:03:1b:92:2d:b8:8f:e0:50:06:18:87:2d:d7:
89:71:39:ab:b6:af:fb:ce:f7:53:fe:18:81:28:3e:
84:c7:5a:ad:87:b0:00:ea:0e:8d:ec:96:47:0e:56:
c4:67:de:26:78:b9:75:cc:e8:20:cd:1c:5c:5c:b6:
a5:15:fc:5f:90:a8:f7:fe:14:3e:5f:b1:26:06:51:
a2:49:00:b9:d5:93:e0:2e:d2:68:5e:3b:56:db:14:
c5:8a:80:e2:2d:dd:fd:82:91:e2:13:53:2e:6b:f8:
43:cc:67:4d:de:ba:36:89:68:c5:9d:73:27:9e:b9:
c4:ca:eb:0c:48:17:f3:f3:55:77:58:d2:2b:1f:bb:
0f:d9:7e:93:c5:89:25:b8:0f:0a:80:f9:31:5f:84:
95:31:10:35:a2:01:24:db:a3:90:ea:e4:98:eb:82:
4e:27:28:0f:0a:dc:ba:5c:5c:b7:80:02:0f:f0:f0:
95:0b:70:3d:c1:ad:22:03:49:4e:b1:e8:5a:06:98:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F6:57:D2:8B:25:54:48:61:46:38:8E:E3:03:6C:BB:FB:B1:68:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0139BEFAF3B811EFB70B3092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:bb:4f:f0:ff:47:69:57:11:11:fe:b3:3b:33:c0:a0:76:db:
fc:78:97:11:f3:b0:f1:60:81:5c:22:66:74:69:c7:b3:25:75:
89:ca:de:47:b8:8f:46:09:60:de:aa:b0:c7:5b:23:0d:9d:15:
94:07:34:37:68:3e:8e:40:ee:fa:21:57:18:d2:fa:bf:a2:b0:
de:32:a0:64:ec:a6:cd:41:ed:f0:a4:ba:27:e4:32:1b:fb:88:
10:05:27:12:4d:8d:90:25:1f:f2:e1:fb:51:ed:a4:d9:05:51:
a0:e3:df:d2:08:a6:6e:6c:7e:cf:86:87:13:d1:68:10:b4:e3:
db:34:e6:bc:c7:1a:19:e2:3a:c2:9b:71:d2:63:e9:31:7c:e1:
33:78:00:0a:3f:5b:44:49:a7:ee:82:54:ed:1a:d6:11:d7:a0:
63:3f:32:95:14:d4:fa:96:5f:f5:be:25:eb:dd:4a:c2:ec:a3:
37:3c:5e:a2:15:55:f0:22:49:aa:7f:95:e1:9e:4a:5f:90:2f:
2b:db:4e:2e:5d:20:d2:5e:73:9f:ac:d1:b0:b1:36:7d:85:83:
f6:0d:fe:64:79:0f:a3:a6:cd:d2:f5:3b:19:2f:20:e9:0b:ff:
4e:6b:42:3b:04:16:f9:5d:9a:5e:ce:2b:27:8c:d7:ad:59:18:
a5:61:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:44 2025 by rpki-client